ORANGE COUNTY SHERIFF'S DEPARTMENT 
INTERNAL MEMO 


TO: All Personnel 
FROM: Director Kirk Wilkerson 
DATE: October 26, 2017 

RE: Phishing Email Alert- New Ransomware "Bad Rabbit" 



There are media reports of a new variant of the "Petya" ransomware named "Bad Rabbit" that is causing infections 
primarily abroad. 

Be suspicious of any unsolicited email from individuals requesting information about the following: employees, internal 
information, sensitive and/or financial information. When in doubt, call the sender to confirm the request you've 
received is legitimate. 

Ransomware is malicious software that encrypts all user files on a computer, and demands a ransom be paid before the 
files are released. The primary method of infection is through a "phishing" email crafted to appear as though it were 
from a legitimate organization or individual, and entices the user to click on a link or open an infected file attachment 
containing malicious code. 

Pay attention to the URL of a website. We have seen malicious websites using a variation in the spelling of the site to 
trick users. Below are a few examples. 

1. Misspelling of URL's : 

o (Facebook.cm) - instead of Facebook.com 
o (Zillow.cm) - instead of Zillow.com 

2. Suspicious phishing email: 


From: Mindy Dinh [ mailto:MindvDinh@B 
Sent: Monday, October 16, 2017 4:21 AM 
To: John | 

Subject: Re: 


http://,refer.setracc 


Mindy Dinh 


If you receive an email that looks a "little off' please do not open any attachments and/or click on any links that looks 
suspicious. 

Please report any suspicious emails by contacting our IT Help Desk (714) 834-4444. 
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